rdelaage/postgresql
1
0
Fork 0
mirror of https://git.postgresql.org/git/postgresql.git synced 2024-08-27 04:37:19 +02:00
Code Issues Packages Projects Releases Wiki Activity
5181d37e4c
postgresql/src/backend/libpq
History
Tom Lane 5181d37e4c Remove no-longer-needed fcntl call (I'm not sure it *ever* did anything 
useful, in fact).
2001-08-05 01:22:16 +00:00
..
auth.c Support ident authentication on local (Unix) socket connections, if the 2001-08-01 23:25:39 +00:00
be-fsstubs.c Allow a non-superuser database owner to vacuum all tables in his 2001-06-13 21:44:41 +00:00
crypt.c Since a missing pg_pwd file is a valid situation, don't print an error 2001-06-23 23:26:17 +00:00
hba.c Even though SO_PEERCRED is probably totally unportable, might as well 2001-08-02 14:39:35 +00:00
Makefile Make the location of the Kerberos server key file run time configurable 2000-08-25 10:00:35 +00:00
password.c Improve wording of authentication files. 2001-06-18 16:11:30 +00:00
pg_hba.conf.sample Support ident authentication on local (Unix) socket connections, if the 2001-08-01 23:25:39 +00:00
pg_ident.conf.sample Add mention of SIGHUP for pg_ident.conf. 2001-08-01 00:52:19 +00:00
pqcomm.c Remove no-longer-needed fcntl call (I'm not sure it *ever* did anything 2001-08-05 01:22:16 +00:00
pqformat.c Remove error report from pq_endmessage when pq_putmessage fails. The 2001-04-16 01:46:57 +00:00
pqpacket.c pgindent run. Make it all clean. 2001-03-22 04:01:46 +00:00
pqsignal.c pgindent run. Make it all clean. 2001-03-22 04:01:46 +00:00
README.SSL Add README.SSL 1999-09-27 03:16:09 +00:00
util.c Change Copyright from PostgreSQL, Inc to PostgreSQL Global Development Group. 2001-01-24 19:43:33 +00:00

README.SSL 

>From the servers perspective:


  Receives StartupPacket
           |
           |
 (Is SSL_NEGOTIATE_CODE?) -----------  Normal startup
           |                  No
           |
           | Yes
           |
           |
 (Server compiled with USE_SSL?) ------- Send 'N'
           |                       No        |
           |                                 |
           | Yes                         Normal startup
           |
           |
        Send 'S'
           |
           |
      Establish SSL
           |
           |
      Normal startup
     




>From the clients perspective (v6.6 client _with_ SSL):


      Connect
         |
         |
  Send packet with SSL_NEGOTIATE_CODE
         |
         |
  Receive single char  ------- 'S' -------- Establish SSL
         |                                       |
         | '<else>'                              |
         |                                  Normal startup
         |
         |
   Is it 'E' for error  ------------------- Retry connection
         |                  Yes             without SSL
         | No
         |
   Is it 'N' for normal ------------------- Normal startup
         |                  Yes
         |
   Fail with unknown